Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: Xppyk5VRXrbuGYIlQD5DcBVIhJ4l7jI3xPr4nVVHN6o=
Subject key identifier: 57:BC:9F:D0:DA:C8:5B:29:AF:3B:9A:D6:52:9E:C4:53:98:F7:0D:9D
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 0194C3BE77B9CECB5F9B7DE356249573C4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1438
Signing time: Sat 01 Feb 2025 23:00:27 +0000
Manifest this update: Sat 01 Feb 2025 23:00:27 +0000
Manifest next update: Sun 02 Feb 2025 23:00:27 +0000
Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: tlus7XXIBR5KCpQvEQeWTYT3YIuecMKEkIAYI8bp1qQ=)
3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:77:b9:ce:cb:5f:9b:7d:e3:56:24:95:73:c4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Feb 1 23:00:27 2025 GMT
Not After : Feb 2 23:00:27 2025 GMT
Subject: CN=57bc9fd0dac85b29af3b9ad6529ec45398f70d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:5f:0a:fe:d2:a4:00:6a:f3:7a:28:92:db:
72:6d:62:cd:7c:2a:11:b3:82:ce:19:07:8a:8e:b8:
f9:50:04:21:c8:bf:a6:02:d9:37:e8:56:82:25:95:
fc:98:7c:0d:38:24:58:f4:da:10:82:01:d3:55:a3:
51:31:04:de:89:c1:b0:d3:d4:4e:fc:7a:ce:f4:dc:
a2:ed:d2:27:7e:42:09:05:4b:91:5b:00:c8:e9:d2:
10:4d:a0:c5:59:d1:83:a1:bc:38:ea:01:81:90:ed:
44:68:4f:aa:0c:b0:05:b4:7a:f6:96:1e:68:63:d9:
a8:e4:eb:17:60:24:d5:1c:78:59:0f:82:41:c6:27:
de:04:ff:87:78:0d:91:8f:41:79:0d:ab:63:07:12:
af:a7:a1:6a:96:81:c5:19:82:d9:7a:1c:12:84:cf:
0b:9d:31:4d:79:d2:3f:2c:93:de:52:3b:96:99:c3:
84:c6:17:c8:64:65:26:98:45:45:17:9e:98:0b:da:
8c:6a:d3:cf:fa:a1:fc:eb:f3:74:c3:cc:5e:5d:d3:
f5:ac:79:b1:98:94:ba:24:f5:5c:fd:8b:50:98:c4:
aa:86:55:75:68:31:5d:7b:ea:d3:bf:a5:dc:67:30:
75:6f:99:f8:f2:2d:be:6b:2c:e2:80:67:b1:13:92:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:9F:D0:DA:C8:5B:29:AF:3B:9A:D6:52:9E:C4:53:98:F7:0D:9D
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:dc:ca:70:ab:95:54:d6:d3:22:be:ca:0f:2a:19:bb:3c:
a7:2f:a1:c2:e0:9e:64:c9:dd:29:df:66:7f:09:b7:32:20:4d:
11:32:2d:68:45:11:01:20:a1:9c:c6:e4:1e:4e:83:47:3a:57:
63:ba:0e:5a:14:8d:aa:48:04:47:d4:e9:71:8e:9f:6e:e2:1c:
65:d9:7e:72:a9:c2:ad:3b:31:f8:6e:8a:d2:7a:a5:9d:5e:47:
65:3f:13:a0:c6:6e:e5:7d:9f:f3:6c:74:66:fb:14:91:08:39:
9e:55:13:af:20:ad:0e:e8:75:f7:83:a5:d3:bd:1c:0e:76:f6:
a3:58:56:38:d5:00:88:6a:a5:d7:56:87:d7:4b:01:0c:f8:48:
77:5c:47:92:19:dc:50:59:a6:f3:f4:dc:f7:88:77:e8:34:30:
8c:26:fb:fe:72:61:84:8f:f5:be:ee:c2:7e:eb:96:8d:57:38:
bd:1e:ad:e1:ec:a2:b2:9d:95:c8:ee:f9:2e:fe:4f:fc:bc:de:
6e:59:5e:2c:17:6a:de:76:2e:d5:af:87:10:62:ec:b6:91:1a:
de:1e:e6:f6:ba:f1:00:12:6b:e0:de:8d:b8:de:1c:51:9e:d4:
e2:69:f5:bc:8e:40:a2:60:4a:80:28:2c:6a:03:0f:6a:79:dc:
42:25:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:36 2025 by rpki-client